{"id":"CVE-2026-82122","kind":"vulnerability","aliases":["CVE-2026-82122"],"related":[],"title":"HiRDB database server: stack buffer overflow may allow code execution","description":"Stack-based Buffer Overflow Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.","summary":"HiRDB Server, a Hitachi relational database, has a stack-based buffer overflow in several version ranges. The sources do not say what input triggers it, but a stack overflow in a database server can let an attacker run code on the host.","severity":"critical","cvss":9.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["database","hirdb","runtime","self-hosted"],"not_affected_if":["unknown"],"how_to_check":"- Check the installed HiRDB Server version against the affected ranges: Version 10 before `10-12-01`, Version 9 from `09-00` through `09-66-22`, and the 9(32) and Additional Function variants listed in the NVD entry.\n- unknown","fix":"- Move HiRDB Server Version 10 to `10-12-01` or later, per the vendor's advisory.\n- Version 9 installs in the listed ranges have no fixed version in the sources; check the vendor advisory.","status":"open","published_at":"2026-10-27T10:16:56+00:00","first_seen_at":"2026-10-27T10:31:03+00:00","triaged_at":"2026-10-27T10:31:46+00:00","updated_at":"2026-10-27T10:31:46+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-27T10:31:46Z","model":"claude-haiku-5-5","output":{"fix":"- Move HiRDB Server Version 10 to `10-12-01` or later, per the vendor's advisory.\n- Version 9 installs in the listed ranges have no fixed version in the sources; check the vendor advisory.","reach":"unknown","title":"HiRDB database server: stack buffer overflow may allow code execution","impact":"high","summary":"HiRDB Server, a Hitachi relational database, has a stack-based buffer overflow in several version ranges. The sources do not say what input triggers it, but a stack overflow in a database server can let an attacker run code on the host.","category":"runtime","nicknames":[],"who_cares":["hirdb","database","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker may run code on the database server host","analyst_note":"Find the Hitachi HiRDB advisory and the fixed version for Version 9 and the reachable port or request that triggers the overflow; NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2026-82122","how_to_check":"- Check the installed HiRDB Server version against the affected ranges: Version 10 before `10-12-01`, Version 9 from `09-00` through `09-66-22`, and the 9(32) and Additional Function variants listed in the NVD entry.\n- unknown","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"HiRDB Server installations in the listed version ranges are affected. The sources do not say which configurations or network exposure are required, so treat any reachable HiRDB server in those ranges as in scope. unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000634,"input_tokens":3384,"output_tokens":591,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-00':83C,94C,108C,135C '-01':87C '-02':120C '-12':86C '-2026':12A,15A '-22':98C,124C '-66':97C,111C,123C,138C '-82122':13A,16A '/v':112C,139C '09':93C,96C,107C,110C,119C,122C,134C,137C '10':80C,82C,85C '32':117C,132C '9':91C,105C,116C,131C 'addit':102C,128C 'affect':76C 'allow':8A 'attack':60B 'base':33B,68C 'buffer':5A,34B,69C 'code':9A,62B 'cve':11A,14A 'databas':2A,17B,28B,55B 'execut':10A 'function':103C,129C 'hirdb':1A,18B,23B,73C,77C,88C,99C,113C,125C 'hitachi':26B 'host':22B,65B 'input':46B 'issu':75C 'let':58B 'may':7A 'overflow':6A,35B,52B,70C 'rang':39B 'relat':27B 'run':61B 'runtim':19B 'say':44B 'self':21B 'self-host':20B 'server':3A,24B,56B,78C,89C,100C,114C,126C 'sever':37B 'sourc':41B 'stack':4A,32B,51B,67C 'stack-bas':31B,66C 'trigger':47B 'version':38B,79C,90C,104C,115C,130C 'vulner':71C","nicknames":[],"mitigations":[],"who_affected":"HiRDB Server installations in the listed version ranges are affected. The sources do not say which configurations or network exposure are required, so treat any reachable HiRDB server in those ranges as in scope. unknown","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T10:16:56+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82122","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82122","severity":null,"published_at":"2026-10-27T10:16:56+00:00","modified_at":"2026-10-27T10:16:56+00:00","first_seen_at":"2026-10-27T10:31:03+00:00","fetched_at":"2026-10-27T10:31:03+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}